Ackqueue versus Queue
-
When writing a floating firewall rule, using the "Match" action, the Advanced Options section allows you to select the Queue that should handle the matched packet.
Additionally, it allows you to set "Ackqueue" to one of the queues you (or the wizard) has created. Can you please direct me to a place in the documentation that explains Ackqueue in detail? So far, all I've found is this:
https://docs.netgate.com/pfsense/en/latest/firewall/configure.html?highlight=ackqueue#ackqueue-queueWhat is the difference between Ackqueue and Queue? It appears that I can assign a matched packet to more than one queue in this section, but I'm not sure what practical effects doing so would achieve.
If I had to guess, I think it means that acknowledge packets go to one queue, and regular packets go to another. If that's the case, and I'm trying to match https traffic, would it make websites begin downloading a little faster if I set Ackqueue to a higher priority queue than the regular queue?
-
@lonnie Update: I found a video that briefly discusses Ackqueue a little bit:
Youtube Video – [1:17:48..]I still wouldn't mind reading more about it, though.
-
@lonnie said in Ackqueue versus Queue:
downloading a little faster if I set Ackqueue to a higher priority queue than the regular queue
Basically, yes. The idea is the ACKs get sent out as fast as possible so the web server streams the download more consistently. The shaping wizard does this by default.
This may help:
https://www.slideshare.net/NetgateUSA/traffic-shaping-basics-with-priq-pfsense-hangout-february-2016I think that's from this?
https://www.youtube.com/watch?v=it_5xvC28vs&ab_channel=Netgate